The future doesn’t need to be orange.

Foreign States have been using their control over digital infrastructure to wield power.

Even historic allies aren’t reliable.

We need #DigitalSovereignty in the UK to keep our systems running.

Read more about our campaign ⬇️

https://www.computerweekly.com/news/366637125/Campaigners-urge-UK-to-develop-digital-sovereignty-strategy

#cybersecurity #ukpolitics #ukpol #sovereignty #tech

This dumb password rule is from La Banque Postale.

Password must be 6 digits and entered on custom pad.

https://dumbpasswordrules.com/sites/la-banque-postale/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from NordVPN.

- Password cannot be longer than 48 characters.

https://dumbpasswordrules.com/sites/nordvpn/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Vistara.

Password must contain:
- 8 to 12 Characters.
- At least one lowercase and uppercase letter.
- At least one numeric character.
- At least one special character (!, @, #, $, %, %, ^, &, +, =).

Must not contain space, first or last name.

https://dumbpasswordrules.com/sites/vistara/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from PCPartPicker.

There are no rules for passwords. Passwords can be any length (including one character)
of any complexity. No password change confirmation emails are sent.

https://dumbpasswordrules.com/sites/pcpartpicker/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

A few companies have, IMHO, managed to stand out a little bit with what content they publish. There's just something about them.

@huntress
@DomainTools
@InfobloxThreatIntel

Today it was DTs turn (again) to publish this absolute beast of an article covering the KNOWSEC leak.

https://dti.domaintools.com/the-knownsec-leak-yet-another-leak-of-chinas-contractor-driven-cyber-espionage-ecosystem/

#ThreatIntel #Cybersecurity #Infosec

This dumb password rule is from Lenovo.

Between 8 and 20, not more.

https://dumbpasswordrules.com/sites/lenovo/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

Our systems aren't secure if foreign powers can pull the plug.

The UK is dangerously reliant on a few foreign tech companies for critical digital infrastructure.

We need open-source systems that we can control.

Sign the petition for #DigitalSovereignty ⬇️

https://you.38degrees.org.uk/petitions/stop-trump-s-kill-switch-secure-our-digital-sovereignty

#opensource #ukpolitics #ukpol #trump #cybersecurity #cybersecuritybill

This dumb password rule is from AOK (German Health Insurance).

This is the online customer portal of the German health insurance company AOK. They have an extensive set of rules for both passwords and usernames.
The password rules are:
- Length between 8 and 14 characters
- At least one letter, one number and one special character
- Special characters are: !...

https://dumbpasswordrules.com/sites/aok-german-health-insurance/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

Just published: Apple Health + ChatGPT: The Privacy Tradeoff.

OpenAI’s new ChatGPT Health feature can connect to Apple Health (and even medical records). The convenience is real, but so is the expanded attack surface. With healthcare breaches hitting millions of records, my blunt take is: if you care about privacy, don’t use it. Full stop.

If you do use it anyway, I break down what “not used for training” does and doesn’t mean, why HIPAA isn’t a force field here, and the practical steps to reduce your blast radius.

https://www.kylereddoch.me/blog/apple-health-chatgpt-the-privacy-tradeoff/

#CyberSecurity #Privacy #Apple #OpenAI #Healthcare #ThreatModeling #DataProtection

This dumb password rule is from Chase Bank.

* Can't use any special characters except ! # $ % + / = @ ~
* Max length restriction (32 characters).
* No runs of identical characters ("aaa") or sequential characters ("abc").
* Password check is case-insensitive

https://dumbpasswordrules.com/sites/chase-bank/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

Does anyone know of companies or organisations in Europe that fight #cybercrime (causing impact to their operations) and that accept job applications?

#FediHired #getFediHired #jobHunt #cybersecurity

This dumb password rule is from Securvita BKK.

Your password can not exceed a length of 30 characters. However, they don't tell you this: If you try to set a longer password, they instead shame *you* for not including at least one uppercase letter, one lowercase letter, one digit and one symbol – *even if you did*.

The error message translat...

https://dumbpasswordrules.com/sites/securvita-bkk/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

tl;dr Block these domains and you’ll have broken several links in this attack’s kill chain:

Webhook[.]site
My-board[.]org
ngrok-free[.]app
rf[.]gd

If you followed @badsamurai ‘s advice and used his block lists, you’d have already blocked a couple of them.

https://www.recordedfuture.com/research/gru-linked-bluedelta-evolves-credential-harvesting #cybersecurity

This dumb password rule is from Banco Mercantil.

8 to 15 chars. No special chars allowed but requires special chars. Also
requires lowercase, uppercase, and numbers. Consecutive chars are
prohibited. Did I mention the page hangs while you type? That eye icon
tho.

https://dumbpasswordrules.com/sites/banco-mercantil/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

“Just as relying on one country for the UK’s energy needs would be risky and irresponsible, so is overreliance on US companies to supply the bulk of our digital infrastructure."

We need #DigitalSovereignty so the rug can't be pulled out from under us.

🗣️ @JamesBaker for ORG.

https://www.digit.fyi/open-rights-group-urges-uk-to-ditch-us-tech-in-data-sovereignty-push/

#CybersecurityBill #cybersecurity #ukpolitics #ukpol

This dumb password rule is from Ubisoft.

Only tells you the rules after submitting and clicking a link to a pop
up window.

https://dumbpasswordrules.com/sites/ubisoft/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

I made a spider-themed word cloud of today's UK Parliament debate on the Cyber Security and Resilience Bill (#CSRB) so you don't have to.

TL;DR: 438 CYBERs! That's a whole lot of...

Only 21 mentions of #DigitalSovereignty, but strong sense this will increase in response to certain $EVENTS

https://hansard.parliament.uk/Commons/2026-01-06/debates/BB815F91-651E-4A24-AAFE-8BD7D92B2033/CyberSecurityAndResilience(NetworkAndInformationSystems)Bill

If you've been affected by the issues raised in this toot, check out the coverage from @openrightsgroup

#ukpol #CyberSecurity #spider

Alt...

Word cloud of the Parliamentary debate superimposed on a crudely drawn cartoon spider found on Teh Interwebs. There are many words, but one word in particular stands out: CYBER. It might be partly because it is in luminous green, whereas the other words are in boring dark blue and black. There background is a custard (mustard?) yellow, because of course it is. And the font might also possibly be somewhat familiar? It's OCR-A, for all your CYBER (and SPIDER and CIDER and...) requirements.

"Now more than ever, the UK needs to build and protect sovereignty over its digital infrastructure, and not leave itself vulnerable to the policies and actions of foreign powers such as the US and China."

🗣 @JamesBaker on ORG's call for #DigitalSovereignty in the UK Cybersecurity Bill.

https://www.theregister.com/2026/01/06/uk_urged_to_unplug_from/

#CybersecurityBill #cybersecurity #ukpolitics #ukpol

This dumb password rule is from Stuttgart Media University.

Your password has to be between 10 and 14 characters.
Also, you need to have at least one number, one uppercase letter and one lowercase letter.
And at least one of these special characters: ```!.,;+-=#$()[]{}&*```.
But don't use any of these special characters: ```<>|§@€?:%^\"'`°~```.
And don't...

https://dumbpasswordrules.com/sites/stuttgart-media-university/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

The UK Cybersecurity Bill is being debated now.

ORG's Programme Manager @JamesBaker is listening in to the goings on with MPs.

Follow this thread for live updates ⬇️

https://social.openrightsgroup.org/@JamesBaker/115848312930140061

#CybersecurityBill #cybersecurity #DigitalSovereignty #ukpolitics #ukpol

Open Rights Group boosted

James Baker » 🌐 2026-01-06
@JamesBaker@social.openrightsgroup.org

The cybersecurity and resilience bill is now being debated in the commons. You can follow the debate here https://parliamentlive.tv/Event/Index/7f6986e6-bca2-4b75-b5a6-d1e9a93feef7 . Will follow along on this thread and keep you posted. Ian Murray kicks off talking about updating scope of regulation to include a wider range of organisations. #cybersecurty #digitalsovereigty #parliament

With friends like these...

Being overexposed to unpredictable foreign powers is hardly secure.

Relying on US tech companies for our digital infrastructure means essential services could be compromised.

We need #DigitalSovereignty in the UK Cybersecurity Bill.

https://www.youtube.com/shorts/mC3Bl__FXB0

#CybersecurityBill #cybersecurity #ukpolitics #ukpol

Now more than ever, the UK needs to build and protect its digital infrastructure.

A digital sovereignty strategy should prioritise Open Source software and interoperable systems for essential services and across government.

This would stimulate innovation and capacity in the domestic tech sector.

Read our briefing for more ⬇️

https://www.openrightsgroup.org/publications/digital-sovereignty-briefing-on-the-cybersecurity-bill/

#DigitalSovereignty #CybersecurityBill #cybersecurity #ukpolitics #ukpol #opensource #interoperability

"Just as relying on one country for the UK’s energy needs would be risky and irresponsible, so is over-reliance on US companies to supply the bulk of our digital infrastructure."

The UK Cybersecurity Bill is an opportunity to improve the UK's control over its infrastructure.

🗣️ @JamesBaker for ORG.

#DigitalSovereignty #CybersecurityBill #cybersecurity #ukpolitics #ukpol

The US' assertion that it'll use hard power to achieve its political, economic and military goals should alarm UK MPs.

From kill switches on vehicles and products to collusion between State and tech companies, the risks of foreign interference must not be underestimated.

#DigitalSovereignty #CybersecurityBill #cybersecurity #trump #ukpolitics #ukpol

We need a Digital Sovereignty strategy to reduce our reliance on US tech companies.

The UK Cybersecurity Bill is in Parliament TODAY.

MPs must ensure our digital infrastructure isn't vulnerable to policies and actions of foreign powers like the US and China.

https://www.openrightsgroup.org/press-releases/cybersecurity-bill-org-calls-on-mps-to-reduce-uk-reliance-on-us-tech-companies/

#DigitalSovereignty #CybersecurityBill #cybersecurity #ukpolitics #ukpol

Exactly https://youtube.com/shorts/mC3Bl__FXB0 @openrightsgroup #cybersecuritybill #cybersecurity #digitalsovereignty

#cybersecurity question: I read recently on here of someone implementing a policy to explicitly reject AI-generated cybersecurity vulnerability reports. Does anyone know who it was? I'm struggling to find a reference...

This dumb password rule is from LibraryThing.

"Your password cannot be longer than 20 characters"

https://dumbpasswordrules.com/sites/librarything/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

Here is ORG's briefing for Digital Sovereignty and the #cybersecurity Bill: https://www.openrightsgroup.org/publications/digital-sovereignty-briefing-on-the-cybersecurity-bill/

This dumb password rule is from Bank Leumi (Israel).

- Password consists of 6 to 12 characters
- Password contains only english letters and numbers without spaces.

https://dumbpasswordrules.com/sites/bank-leumi-israel/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

What links #Trump and #Cybersecurity? Simple: you cannot have a dependent relationship on US Tech if you want to object to #Trump and his policies. If Cybersecurity includes evading threats of a US off switch, then we have to establish what #Digitalsovereignty entails.

Today, the UK watches and remains as quiet as possible regarding #Trump and his dismantling of the international rule of law. Tomorrow, Parliament will debate the #Cybersecurity and Resilience Bill at second reading. https://bills.parliament.uk/bills/4035/stages

This dumb password rule is from IRS.

Password rules:
- Between 8 and 32 characters long
- Must contain at least one numeric and one special character (!@#$%&*)
- At least one uppercase and at least one lowercase letter

https://dumbpasswordrules.com/sites/irs/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Vivo.

The password must only contains numbers and the max length is 6.

https://dumbpasswordrules.com/sites/vivo/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Lenovo.

Between 8 and 20, not more.

https://dumbpasswordrules.com/sites/lenovo/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

When you think that things like turning off #Bluetooth as a precaution are overkill, security researchers drop a bomb like this. (long, but interesting read)

https://insinuator.net/2025/12/bluetooth-headphone-jacking-full-disclosure-of-airoha-race-vulnerabilities/

#CVE #security #cyberSecurity

This dumb password rule is from Saturn.

Passwords need to be between 8 and 15 characters.

https://dumbpasswordrules.com/sites/saturn/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Fidelity.

No more than 20 characters and leave out characters commonly used by
programmers. We don't want you to hack the mainframe.

https://dumbpasswordrules.com/sites/fidelity/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

I'm not sure when this changed, but yelling "whose phone is this" and "I'm being pulled over" at siri no longer disable biometrics on iOS 26.1. This means the only methods of quickly turning off biometrics are to set up SOS and tap the side button 5 times or restart your phone. Restarting is much stronger anyway since it wipes the decryption keys that are loaded after the first unlock. Plan accordingly if you use finger or face unlocks and are wary of law enforcement.
#iPhone #siri #biometrics #cybersecurity #apple